Experimental Jev-powered RLS linter catches Supabase policy bugs rule-based lint can't
SeanOliver · x · 2026-09-19
A developer built an experimental RLS linter for Supabase using Jev. Unlike rule-based lint that only checks RLS is enabled, Jev makes semantic judgments — e.g. auth.uid() is not null looks shape-identical to the correct = userid check but actually lets every authenticated user read the whole table, and Supabase's Security Advisor only flags it for performance. The demo shows nine judgments on one policy in a single request, evaluated against 13 scenarios including correlated-join leaks and uncorrelated membership subqueries.
More from coding & agent
- SELF-INDEX: a framework for retrieval indexes that self-evolve without humans — Sangam Lee · 2026-09-19
- Factory launches Private deployment for VPC, on-prem and air-gapped networks — matanSF · 2026-09-19
- Jev returns choice probabilities at a fraction of LLM cost for game AI — tristanbob · 2026-09-19
- Automated Evals Recover 87% of Human-Flagged Failures, Parlance Labs Study Finds — HamelHusain · 2026-09-19
- Gary Marcus Warns LLM-Generated Code Is Piling Up a Security Nightmare — GaryMarcus · 2026-09-19
- Dev builds two-way agent bridge between Things 3 and Muse to automate chores — SeanOliver · 2026-09-19